Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
When Dreamcasts Attack
Kevin Poulsen, SecurityFocus 2002-07-31

White hat hackers use game consoles, handheld PCs to crack networks from the inside out.

Comments Mode:
When Dreamcasts Attack 2002-08-01
Anonymous
Better than a toy would be a box that looks (and functions)

like an 8-port D-Link switch....

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-01
Anonymous
An intersting and possibly useful technique, no doubt, but it occurs to me that if this would be an incredibly risky tool for a cracker to use. The one advantage that crackers have long held is that their intrusions leave little to nothing in the way of traditional physical evidence (fingerprints, h...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-02
anonymous (1 replies)
What valid reason can anyone have for releasing this type of software?! Especially consulting groups that claim to be "white hat"? Are they looking for more business?

As a IT Security director for a Fortuen 200 comapny, I will not consider anyone for work who does this type of action.

...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
HC
I guess you don't want to have to explain to your VP that your security budget could be flushed down a toilet by a child?s toy.

Honestly, if your worried about be hacked by a dreamcast perhaps you should hire some outside help.

...

[ more ]  [ reply ]
Totally Unethical 2002-08-02
MT (2 replies)
What could possibly motivate Higbee and Davis to release this code to the world? It is one thing to try to stay ahead of the hacker world by discovering new vulnerabilities, but it is quite another to distribute the software directly to the script-kiddies. Are they hoping to get consulting gigs to...

[ more ]  [ reply ]
Totally Unethical - I think you missed the point... 2002-08-06
Anonymous
I saw the presentation; it wasn?t about releasing a "new" attack tool. The presentation was about weaknesses in internal networks and showcased that even non-computers can pose a threat to poorly secured networks. All they did was port pre-existing VPN software to a dreamcast.

Your post is essen...

[ more ]  [ reply ]
Totally Unethical 2002-08-06
Anonymous
You really missed the point. I use to work with these gentlemen. They are some of the best security guys going. What they are trying to show that all those people who think they are safe behind firewalls better think again.

I know to many organizations that think that just because they have fi...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-02
JCII
an interesting Concept, however if the Admin has locked down unused ports, it will not work... I know if I saw a connection on my hub where there wasn't supposed to be one, my suspicisions would be aroused. I don't have connections to the hub where there aren't users. And I keep my maps updated....

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-04
Anonymous (1 replies)
Exactly what is new here? You can get cheap laptops on ebay too and I'd say that a laptop would blend in more in most environments than a game console would and you wouldnt even have to mod it. ...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
Anonymous (1 replies)
And of course which would stand out more in a corporate environment, an unused laptop on a desk or a "toy like" game console? Can't remember seeing too many game consoles on corporate desks in my travels! "Oooh look - there's a dreamcast console, on the secretaries desk...I'll just ignore it shall...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
Anonymous
Maybe you should look closer, you'd be surprised what you might find.

Besides this was a prof of concept to show how even innocent looking devices can do you harm.

Grow-up...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
LW
As always, proper user training, and focused and aware administration will mitigate all but the most subversive of activities....

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
Anonymous
While not anything that new in terms of how it is done, It is a new way of doing things. Of course you could take a laptop and do the same thing, or even say a wireless access point hidden as a coffee machine and drop it in on the network it's the use of the dreamcast that makes this an interesting...

[ more ]  [ reply ]
When Dreamcasts Attack - Woo Woo 2002-08-06
Anonymous
Oh get real. What a gimmick. It would be much easier to plant a malicious virus on a machine than plug in a dreamcast. They should be writing aritcles on "self-promotion" techniques, not network security. Please...

This is a great site, let's not turn it into the "Network World" of security site...

[ more ]  [ reply ]
Yes, Unethical. 2002-08-06
Anonymous
These developers have no legitimate reason to release that code for the Dreamcast. Other than people stuck with a dead game console using it for a home network, nobody else besides a hacker with malicious intent would use such software. In a corporate network, we'd all just go out and get the RIGH...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
illsci
Wake up! Thats what this was about. It was not meant as a tutorial on how to crack your obviously impenetrable networks with a toy, it jus proved it could be done. Personally Id jus use a palm. Peace haters....

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
Anonymous
Gee, bring in a mini-hub, some CAT5, and the tool, get up into a crawlspace close to AC power, rock on... Scary.

Gotta wonder if DOD or the nuke regulatory agency or any other agency has been penetrated by anyone recently???

Did you get good ID & background checks for your last set of pa...

[ more ]  [ reply ]
When Dreamcasts Attack 2002-08-06
Anonymous
I see a dangerous trend here. It sounds like to many people are either jealous or have been drinking from the MS non-disclouser fountain. Or is it the "I'll bury me head in the sand and the threat will vanish."

If they had not done this, then someone else would have. Worse the other people mig...

[ more ]  [ reply ]







 

Privacy Statement
Copyright 2009, SecurityFocus